Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de77e4d6-8de1-407f-8ff9-841658b07cc0.roa
File: de77e4d6-8de1-407f-8ff9-841658b07cc0.roa (raw, json)
Hash identifier: B6fHR191XymUx1JjgcBx1DduhJ4yivcFfep8aq5JrOw=
Subject key identifier: A9:18:05:F2:F4:CC:BB:79:D0:3C:32:40:9C:24:C4:CB:3D:93:20:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63B9B5198E2B4E7165CB63EDEC48770A48785163
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de77e4d6-8de1-407f-8ff9-841658b07cc0.roa
Signing time: Tue 04 Mar 2025 16:51:37 +0000
ROA not before: Tue 04 Mar 2025 16:51:37 +0000
ROA not after: Tue 08 Apr 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f27:8000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b9:b5:19:8e:2b:4e:71:65:cb:63:ed:ec:48:77:0a:48:78:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 4 16:51:37 2025 GMT
Not After : Apr 8 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:9c:90:7b:77:ae:5a:c8:06:9d:1c:f2:bb:
a9:37:af:e6:b4:cb:68:07:39:da:84:ae:ff:a0:93:
a9:2a:7f:59:5f:a8:22:69:14:92:4c:fe:bc:f8:dd:
56:a7:e9:ff:ae:e4:b0:2b:57:45:5f:08:db:d1:1c:
b1:ab:84:9f:65:59:6a:e4:fb:1f:e6:ca:b0:7d:7a:
b6:ce:dc:3c:77:3b:76:51:b3:1c:b9:aa:f5:19:c8:
d2:9a:14:96:28:9b:44:70:7b:39:09:ad:4d:f0:57:
99:97:e6:df:3b:a4:28:ed:5e:1e:d3:fb:1c:b2:b2:
ac:39:4c:8d:3c:27:9e:ef:69:1c:51:2e:ff:20:18:
b9:3f:ad:a2:f2:09:fa:56:7d:9d:85:d8:0c:c8:e8:
03:3f:20:30:4f:5a:c9:43:33:db:6f:50:9b:2b:83:
1b:4f:ac:a8:60:e3:6b:90:c1:df:97:94:38:6e:a7:
97:2b:68:78:90:ef:29:0f:ac:17:20:35:37:59:26:
a0:45:72:c0:52:b4:b5:ca:a7:ed:78:f4:f8:27:11:
ac:3d:73:ec:8e:d3:13:f6:76:89:0d:60:57:60:b0:
ee:e2:a9:e3:18:58:34:74:52:d0:02:1e:52:24:bb:
c6:93:2b:96:9e:f0:0c:a3:1c:51:1c:4f:fe:77:0d:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:05:F2:F4:CC:BB:79:D0:3C:32:40:9C:24:C4:CB:3D:93:20:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de77e4d6-8de1-407f-8ff9-841658b07cc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f27:8000::/36
Signature Algorithm: sha256WithRSAEncryption
5a:8f:ea:29:84:3b:75:ce:e2:7f:11:43:0f:01:d8:35:08:ff:
50:2a:16:c5:0e:c9:82:e8:aa:a7:68:28:2b:0e:ee:cd:da:62:
20:b6:6a:3b:ac:fa:c2:04:d0:79:a1:a1:33:37:cc:91:00:fb:
85:6e:d3:4b:51:d1:2b:1c:e2:e4:46:5a:0c:22:51:02:9e:19:
18:cf:66:10:10:b9:98:b2:2d:f1:f4:ca:da:bb:5e:0a:ff:23:
68:55:fc:1a:f7:97:b4:59:29:5b:de:d8:a4:e3:94:87:99:38:
59:c4:5b:fd:bf:72:4f:70:ae:6d:6b:4b:ec:60:45:7c:40:f8:
36:8c:90:97:c0:99:ff:89:28:45:70:06:7d:c6:24:48:4b:23:
f9:ec:9d:05:a1:9c:5c:ad:3a:54:5f:ca:da:07:36:6d:ea:a7:
54:1c:9c:86:c4:bd:9b:0c:aa:17:f0:5d:91:88:61:91:18:7f:
0c:64:46:36:ea:86:e3:e6:5f:71:77:97:96:58:a8:81:f2:1a:
b1:ca:25:b2:37:05:f7:dd:11:43:64:3f:bf:48:76:d3:d0:4e:
06:4d:ce:a3:bb:f3:88:78:1a:86:cc:68:ad:3b:a4:e9:a6:96:
17:1a:72:62:2c:68:e7:33:ac:14:ae:c0:7a:95:da:b7:cc:1e:
b1:1e:f9:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:44 2025 by rpki-client